Packages

valibot

1.5.0 · 9 Sep 2026MIT32M / weekRepositoryHomepagenpmAtom feed

Upgrading valibot from 0.1.0 to 0.42.1

54 releases in betweenevery note read

Other targets from 0.1.0Clears its advisory1.4.2Latest1.5.0
7
changes to make
0
advisories fixed
79
new
43
fixes

Start here

Before you upgrade

Tick each one off as you go
  • breaking0.30.0
  • breaking0.30.0
  • breaking0.26.0
  • breaking0.13.0
  • deprecated0.20.0
  • deprecated0.19.0
  • deprecated0.15.0

Security

2 advisories still affect 0.42.1

Upgrading to 1.4.2 clears them.

  • Fix prototype pollution vulnerability of record and recordAsync (pull request #67)

    0.11.0

Release by release

  1. 0.42.1

    20 Sep 20241 fix
    • fixed

      Fix function type declaration of _run property

  2. 0.42.0

    15 Sep 20243 new · 1 fix
    • new

      Add metadata action to add custom metadata to a schema

    • new

      Add title metadata action to add a title to a schema (discussion #826)

    • new

      Add decimal action to validate integer and float strings (pull request #823)

    • fixed

      Fix inference of generics in IssueDotPath type (issue #814)

  3. 0.41.0nothing new or fixed in the note

  4. 0.40.0

    29 Aug 20242 new · 1 fix
    • new

      Add nanoid action to validate Nano IDs (pull request #789)

    • new

      Add undefinedable and undefinedableAsync schema (issue #385)

    • fixed

      Fix invalid output type for transformed optional object entries (issue #806)

  5. 0.39.0

    24 Aug 20241 new · 2 fixes
    • new

      Add support for exactOptionalPropertyTypes config (issue #385)

    • fixed

      Fix IssueDotPath type for pipe and pipeAsync method (issue #793)

    • fixed

      Fix IssueDotPath type for variant and variantAsync schema (issue #700)

  6. 0.38.0

    20 Aug 20242 fixes
    • fixed

      Fix TypeScript errors in TuplePath and QuestionMarkSchema type (issue #659, #776)

    • fixed

      Fix missing TypeScript errors in pipe and pipeAsync method (pull request #785)

  7. 0.37.0

    30 Jul 20242 new · 2 fixes
    • new

      Add base64 action to validate Base64 strings (pull request #644)

    • new

      Add description metadata action (pull request #747)

    • fixed

      Fix bug in fallback and fallbackAsync method for specific schemas (pull request #752)

    • fixed

      Fix bug in fallbackAsync method for async schemas (pull request #732)

  8. 0.36.0

    5 Jul 20244 new
    • new

      Add normalize action to normalize strings (issue #691)

    • new

      Add support for async schemas to entriesFromList util

    • new

      Add support for numbers and symbols to entriesFromList util (issue #492)

    • new

      Add key property to SetPathItem type to improve DX (issue #693, #694)

67 other lines we could not sort, mostly version bumps

  • Rename NoPipe type to SchemaWithoutPipe

    0.42.0

  • Change reference property of all action base types to be less strict (issue #799)

    0.41.0

  • Change implementation of variant and variantAsync to improve performance and issues generation for nested variants with different discriminators (pull request #809)

    0.41.0

  • Change expects and expected property by enclosing combined values in parentheses

    0.38.0

  • Change question mark handling for optional, optionalAsync, nullish and nullishAsync schemas in objects

    0.38.0

  • Refactor HEXADECIMAL_REGEX (pull request #666)

    0.37.0

  • Change unknown in LengthInput type to ArrayLike<unknown>

    0.37.0

  • Change ArrayInput and ContentInput type to use MaybeReadonly

    0.37.0

  • Remove FunctionReference type and refactor code

    0.36.0

  • Increase argument limit of pipe and pipeAsync method to 19 (issue #643)

    0.35.0

1 internal line (docs, tests, tooling) left out.